[Security Solution] Error 500 Importing Security Detection Rule

[MakoWish]

Describe the bug:

When attempting to import a Security Detection rule that was previously exported, the following error message appears:

{
  "name": "Error",
  "body": {
    "message": "Cannot use 'in' operator to search for 'investigation_fields' in Honeypot",
    "status_code": 500
  },
  "message": "Internal Server Error",
  "stack": "Error: Internal Server Error\n    at fetch_Fetch.fetchResponse (https://elastic/86cbc85e621f/bundles/core/core.entry.js:16:232029)\n    at async https://elastic/86cbc85e621f/bundles/core/core.entry.js:16:230021\n    at async https://elastic/86cbc85e621f/bundles/core/core.entry.js:16:229978"
}

Kibana/Elasticsearch Stack version:

8.17.0

Server OS version:

Ubuntu 24.04 LTS

Browser and Browser OS versions:

Firefox 135.0 (64-bit)
Kubuntu 24.04 LTS

Elastic Endpoint version:

Original install method (e.g. download page, yum, from source, etc.):

Functional Area (e.g. Endpoint management, timelines, resolver, etc.):

Steps to reproduce:

1. Navigate to 'Detection rules (SIEM)' and attempt to import a single rule that has previously been exported

Current behavior:

Error 500 noted above.

Expected behavior:

Rule should import.

Screenshots (if relevant):

Errors in browser console (if relevant):

Provide logs and/or server output (if relevant):

Any additional context (logs, chat logs, magical formulas, etc.):

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[elasticmachine]

Pinging @elastic/security-detection-rule-management (Team:Detection Rule Management)

[elasticmachine]

Pinging @elastic/security-detection-engine (Team:Detection Engine)